Published: 05/04/2024 Updated: 01/05/2024

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated malicious user to execute arbitrary code on the system by sending a specially crafted request.

A heap-based buffer over-read vulnerability was found in the Xorg server's ProcXIGetSelectedEvents() function This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness This vulnerability could be exploit ...

The ProcRenderAddGlyphs() function calls the AllocateGlyph() function to store new glyphs sent by the client to the X server AllocateGlyph() would return a new glyph with refcount=0 and a re-used glyph would end up not changing the refcount at all The resulting glyph_new array would thus have multiple entries pointing to the same non-refcounted ...

oss-sec mailing list archives   By Date By Thread </form>    Fwd: XOrg Security Advisory: Issues in XOrg X server prior to 21112 and Xwayland prior to 2325 <!--X-Subject-Header-End- ...

oss-sec mailing list archives   By Date By Thread </form>    Re: Fwd: XOrg Security Advisory: Issues in XOrg X server prior to 21112 and Xwayland prior to 2325 <!--X-Subject-Header- ...

CVE-2024-31083

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect